CVE-2026-49762: elixir 0.9.3 to before 1.20.1

Affected technology

elixir · 0.9.3 to before 1.20.1
elixir-lang

elixir · 057691722eb8cfe315f5606358954a2b173ff7a3 to before *; status changes: c64417d72fd5c7d09e963ca3ac5fa2b140978d9e — unaffected, 64e6707233464c3e55a9ca6b44019aed25b0390a — unaffected
elixir-lang

Description’s affected range: Version module

Component: 'Elixir.Version', 'Elixir.Version.Parser'
Function: 'Elixir.Version':parse/1, 'Elixir.Version':parse!/1, 'Elixir.Version':match?/3, 'Elixir.Version':compare/2, 'Elixir.Version':parse_requirement/1, 'Elixir.Version.Parser':parse_version/2, 'Elixir.Version.Parser':parse_digits/2, 'Elixir.Version.Parser':require_digits/1, 'Elixir.Version.Parser':convert_parts_to_integer/2
File: lib/version.ex, lib/elixir/lib/version.ex

Attack conditions (Source advisory, CVSS 4.0): Local · No privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could disrupt service. Source advisory’s CVSS 4.0 assessment (base score 5.1/10) rates confidentiality and integrity impact as none; availability impact as low.